@@ -2,13 +2,21 @@ menu "KernelSU"
22
33config KSU
44 tristate "KernelSU function support"
5+ depends on OVERLAY_FS
56 default y
67 help
78 Enable kernel-level root privileges on Android System.
8- Requires CONFIG_KPROBES for kernel hooking support.
99 To compile as a module, choose M here: the
1010 module will be called kernelsu.
1111
12+ config KSU_KPROBES_HOOK
13+ bool "Use kprobes for kernelsu"
14+ depends on KSU
15+ depends on KPROBES
16+ default y
17+ help
18+ Disable if you use manual hooks.
19+
1220config KSU_DEBUG
1321 bool "KernelSU debug mode"
1422 depends on KSU
@@ -17,29 +25,19 @@ config KSU_DEBUG
1725 Enable KernelSU debug mode.
1826
1927config KSU_ALLOWLIST_WORKAROUND
20- bool "KernelSU allowlist workaround"
21- depends on KSU
22- default n
23- help
24- Enable workaround for broken allowlist save
25-
26- # For easier extern ifdef handling
27- config KSU_MANUAL_HOOK
28- bool "KernelSU manual hook mode."
29- depends on KSU && KSU != m
30- default y if !KPROBES
31- default n
32- help
33- Enable manual hook support.
28+ bool "KernelSU Session Keyring Init workaround"
29+ depends on KSU
30+ default n
31+ help
32+ Enable session keyring init workaround for problematic devices.
33+ Useful for situations where the SU allowlist is not kept after a reboot.
3434
35- config KSU_KPROBES_HOOK
36- bool "KernelSU tracepoint+kretprobe hook"
37- depends on KSU && !KSU_MANUAL_HOOK
38- depends on KRETPROBES && KPROBES && HAVE_SYSCALL_TRACEPOINTS
39- default y if KPROBES && KRETPROBES && HAVE_SYSCALL_TRACEPOINTS
40- default y if !KSU_MANUAL_HOOK
35+ config KSU_LSM_SECURITY_HOOKS
36+ bool "use lsm security hooks"
37+ depends on KSU
38+ default y
4139 help
42- Enable KPROBES, KRETPROBES and TRACEPOINT hook for KernelSU core .
43- This should not be used on kernel below 5.10 .
40+ Disabling this is mostly only useful for kernel 4.1 and older .
41+ Make sure to implement manual hooks on security/security.c .
4442
4543endmenu
0 commit comments